| Package | Affected versions | Patched versions |
|---|---|---|
| registrationmagic | ≤ 4.6.0.3 |
A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free